eric.ness.net

I was going to post a link to this video a couple of days ago – it’s Phil Haack’s MIX09 “ASP.NET MVC Ninjas on Fire Black Belt Tips” presentation.

This presentation covers among other things Cross-Site Request Forgery Attacks. Haack also wrote up a great blog post on the topic as well.

http://videos.visitmix.com/MIX09/T44F [Video]
http://haacked.com/archive/2009/04/02/anatomy-of-csrf-attack.aspx [Blog Post]